@christophetd : Essentially, it means if your Splunk user's IAM credentials are compromised, an attacker can assume any privileged role in the AWS account. Even if they cannot list roles, they can most likely enumerate the roles available as described in rhinosecuritylabs.com/aws/assume-wor… • TwiCopy

Christophe Tafani-Dereeper

@christophetd

+ Follow

302
Location: bsky.app/profile/christ…

ID: 71315033

linkhttps://christophetd.fr calendar_today03-09-2009 17:55:09

10,10K Tweet

5,5K Takipçi

1,1K Takip Edilen

Christophe Tafani-Dereeper

@christophetd

5 years ago

Essentially, it means if your Splunk user's IAM credentials are compromised, an attacker can assume any privileged role in the AWS account. Even if they cannot list roles, they can most likely enumerate the roles available as described in rhinosecuritylabs.com/aws/assume-wor…

thumb_up_off_alt6

chat_bubble_outline1

repeat1

shareShare